Medium · 5.5 Exploitation more likely CVE-2025-53156 EUVD-2025-24313GHSA-2mc5-3c8c-rg8r

Windows Storage Port Driver Information Disclosure Vulnerability

Published Aug 12, 2025 · Updated Feb 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 11 Version 24H2 Product: Windows Server 2022, 23H2 Edition (Server Core installation) Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.4946	10.0.26100.4946
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 – < 10.0.25398.1791	10.0.25398.1791
Microsoft	Windows Server 2025	10.0.26100.0 – < 10.0.26100.4946	10.0.26100.4946
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 – < 10.0.26100.4946	10.0.26100.4946

Advisories 3

WID-SEC-2025-1790 Microsoft Windows und Windows Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 20, 2025
NCSC-2025-0251 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Aug 13, 2025
MSRC-CVE-2025-53156 Windows Storage Port Driver Information Disclosure Vulnerability Microsoft Security Response Center · Aug 12, 2025

References

Windows Storage Port Driver Information Disclosure Vulnerability vendor-advisory patch